ClawHub

爆款标题生成器技能

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only Chinese viral headline generator with no code execution, credentials, network access, persistence, or hidden data handling.

Install this if you want Chinese viral-title suggestions for social platforms. Be aware that general requests like writing or optimizing a title may route to this skill and produce a clickbait-style Chinese template, so review outputs for accuracy, tone, and platform policy fit before using them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger phrases are overly broad and overlap with common writing requests such as title generation and optimization. This can cause the skill to activate in unintended contexts, hijacking general user workflows and increasing the chance that users receive rigid, preformatted clickbait-oriented output when they did not explicitly request this specific skill.

Natural-Language Policy Violations

Medium
Confidence
83% confidence
Finding
The skill description and output requirements enforce Chinese-language behavior without checking the user's language preference or documenting a necessary locale restriction. This can cause incorrect or unusable output for users operating in other languages, and in agent settings it may override the surrounding conversation language unexpectedly.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal